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- Th MAILING DATE of this communication app ars on th cov rslioet with th correspondence address •• 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- \f the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- }f NO period for reply Is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to connmunication(s) filed on 03 May 2001 . 
2a)n This action is FINAL. 2b)S This action is non-final. 

3) n Since this application is in condition for allowance except for formal nnatters, prosecution as to the nnerits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-14 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) [3 Claim(s) 1-4,6-8 and 11-14 is/are rejected. 

7) 13 Claim(s) 5, and 9-10 is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 185(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or fonm PTO-152. 
Priority under 35 U.S.C. §§119 and 120 

12) 13 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)nAII b)n Some*c)n None of: 

1 .13 Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) □ The translation of the foreign language provisional application has been received. 

14) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1.78. 



Attachment(s) 

1) 13 Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) Paper No(s). 

2) EH Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) O Notice of Informal Patent Application (PTO-152) 

3) n Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) CD Other: 
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DETAILED ACTION 

1 . This Office action is in response to the Application filed on 05/03/2001 . 

2. Claims 1-14 are presented for examination. 

Allowable Subject Matter 

3. Claims 5 and 9-10 are objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations of the base 
claim and any intervening claims. 

4. Claims 7-8 would be allowable if rewritten to overcome the rejection(s) under 35 
U.S.C. 112, second paragraph, set forth in this Office action and to include all of the limitations 
of the base claim and any intervening claims. 

Claim Rejections - 35 USC §112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

6. Claims 7-8 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant regards as 
the invention. 

Claim 7 claims "wherein the activation module runs as a daemon so maintaining said 
interception module in virtual memory", it is unclear whether the activation module refers to the 
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first instance or the second instance. Examiner interprets the second instance runs as a daemon in 
according to the specification (page 10, lines 1-16) for the rejection purpose. 
Correction is required. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

8. Claims 1-2, 6, 12, and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deianov et al (U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl). 

9. As to claim 1, Deianov teaches an activation module (an interception module, a modified 
loader program; col. 3, lines 35-54), an interception module (a system call wrapper; an 
initialization module; col. 3, lines 47-54), the activation module being adapted to load the 
interception module (the modified loader loads an initialization module and a system call 
wrapper; col. 3, lines 47-54), the activation module being adapted to redirect the one or more 
API calls by creating an alias to any page containing an entry point for an API call to be 
intercepted and to write the address of the interception module to the alias (Pointers 1 14 to 
system calls 1 15 are located in an operating system interrupt vector table 1 13 ... to the 
interception module 1 1 1 to execute the interception module 111; col. 6, hnes 5-38), the 
activation module being adapted to provide to any instances of the interception module the 



Application/Control Number: 09/848,201 Page 4 

Art Unit: 2126 

original entry points for the one or more API calls (the interception module 1 1 1 first writes, to 
the return address area 129 of the system call wrapper 125, the address to which to return 
execution after the system call wrapper 125 terminates; col. 8, line 56 - col. 9, line 13), and the 
interception module being adapted to selectively provide modified fiinctionality for the 
intercepted API calls (When a call is made ... not all system calls 115 need be intercepted; col. 6, 
lines 35-40 and alternative object code to be executed instead of the system call ... system call 
wrapper; col. 1, line 64 - col. 2, line 2). 

10. However, Deianov does not teach loading the interception module to occupy a location in 
a shared region of virtual memory as long as interception of the API calls is required. Hammond 
teaches loading the interception module to occupy a location in a shared region of virtual 
memory as long as interception of the API calls is required (an injection dynamic link library 
called INJECT.DLL is loaded from the injection appUcation into a second pre-determined 
memory location within an area of shared memory; col. 8, lines 36-67). 

11. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Hammond and Deianov because Hammond teaching o 
loading the interception module would improve the flexibility of Deianov' s system by 
dynamically injecting the execution logic into a shared memory space of a window operating 
system (col 2, lines 56-58) 
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12. As to claim 2, Deianov does not explicitly teach the activation module is adapted to load 
the interception module at system initialization time. Hammond teaches the activation is adapted 
to load the interception module at system initialization time (an injection application is started 
with a kernel application ... for the windowed operating system; col. 5, lines 46-58). 

13. As to claim 6, Deianov teaches the interception module is adapted to export one or more 
global variables located in its code segment to the activation module (The initialization module 
123 ... select process 107; col. 7, Unes 5-29), each global variable corresponding to an API call 
to be intercepted (the entry point in the system call wrapper; col. 7, lines 5-29), the activation 
module being adapted to create an alias to any page containing one of the one or more global 
variables to write the original entry point of the one or more API calls to the respective aliases 
(Pointers 1 14 to system calls 115 are located in an operating system interrupt vector table 113 ... 
to the interception module 1 1 1 to execute the interception module 111; col. 6, lines 5-38). 

14. As to claim 12, Deianov does not explicitly teach one or more API calls to be intercepted 
is a call for allocating memory, however, Deianov teaches a system call performs some system 
operations, such as the access of a system hardware or software (col. 1, lines 31-44). It would 
have been obvious the call for allocating memory could also be intercepted. 

15. As to claim 14, Deianov teaches computer program code stored on a computer readable 
storage medium for intercepting API calls when executed on a virtual memory computer system, 
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the program code comprising the system of claim 1 (A computer memory 101 ... into the 
operating system 117; col. 5, lines 50-66). 

16. Claims 3-4 and 1 1 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deianov et al. (U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl) further in view of 
Pietrek (Leara System-Level Win32 Coding Techniques by Writing an API Spy Program). 

17. As to claim 3, Deianov teaches the activation module is adapted to read a configuration 
file (a list of selected processes ... of a default loader program; col. 8, lines 1-1 1). 

18. However, Deianov does not teach the configuration file containing data defining the API 
calls to be intercepted and the manner in which the API calls are to be modified, the activation 
module being adapted to write the configuration data to an area of shared memory and to 
provides to all instances of the interception module the location of the shared memory. Pietrek 
teaches the configuration file containing data defining the API calls to be intercepted (the spy 
DLL reads an input file . . . about the function's parameters; page 8), the activation module being 
adapted to write the configuration data to an area of memory (the code portion of the stub ... on 
the stack; page 8), and to provides to all instances of the interception module the location of the 
shared memory (As the spy DLL builds each stub ... the import section; page 9). 

19. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Pietrek and Deianov because Pietrek teaches a method to 
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monitor multiple applications by creating an extensible list of functions to be intercepted and no 
modification to the programs (page 1). 

20. As to claim 4, Deianov does not teach an instance of the interception module is 
responsive to receiving a redirected API call to load itself within the process making the API call 
so that a segment of global data is made available to each instance of the interception module. 

21 . Pietrek teaches an instance of the interception module is responsive to receiving a 
redirected API call to load itself within the process making the API call so that a segment of 
global data is made available to each instance of the interception module (By freezing the target 
process . . . code for the program; pages 5-6). 

22. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Deianov and Pietrek because Pietrek teaches sharing data 
to multiple instances of the interception module would improve the performance by reducing the 
memory usage. 

23. As to claim 11, Deianov does not teach the interception module is adapted to check that 
it is not being called recursively prior to loading itself However, Deianov teaches recursively 
execute the wrapper is avoided by check on the flag (col 7, lines 29-40 and col 8, lines 44-55). 
It would have been obvious to one of ordinary skill in the art to have included checking of 
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recursively called the Deianov's system because it provides a method not to load multiple 
instance of the same code into the process address space. 

24. Claims 13 is rejected under 35 U.S.C. 103(a) as being unpatentable over Deianov et al. 
(U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl) further in view of Admitted Prior 
Art (APA). 

25. As to claim 13, Deianov does not teach the activation module and the interception 
module are adapted to operate on OS/2 Warp Version 3 SMP and Warp Version 4.5 operating 
systems. Deianov teaches the activation module and the interception module are adapted to 
operate on the multitasking system (col. 1, lines 8-1 1). APA teaches OS/2 Wrap Version 3 SMP 
and Warp Version 4.5 operating system for used by 32-bit appUcations (page 2, lines 18-25). It 
would have been obvious to apply the teaching of APA to the system of Deianov because it 
provides a method to run the application in different operating systems. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Diem K Cao whose telephone number is (703) 305-5220. The 
examiner can normally be reached on Monday - Thursday, 9:00AM - 5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Meng-Ai An can be reached on (703) 305-9678. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 
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Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 305-3900. 

Any response to this action should be mailed to: 

Commissioner for Patents 
PO Box 1450 

Alexandria, VA 223 1 3- 1 450 j. - 



Diem Cao 




TECHNOLOGY CENTER 2100 



